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DEVICE, SYSTEM, AND METHOD FOR 
CAPTURING EMAIL BORNE VIRUSES 

TECHNICAL FIELD OF THE INVENTION 

This invention relates in general to electronic 
communication, and more particularly to a device, system, 
and method for capturing email borne viruses. 



AUSOl :2294S8.1 



ATTORNEY ' S DOCKET 
062891 . 0489 



PATENT APPLICATION 



RACKC4ROIJND OF THE INVENTION 

Electronic communication is often transmitted in the 
form of emails to recipients via various networks and 
devices. Computer systems are coupled to one or more 
5 networks such as the Internet or an Intranet and receive 
emails on a periodic basis. Wireless devices such as 
personal digital assistance (PDAs) and wireless phones 
may also receive emails via wireless networks which may 
be coupled to the Internet or an Intranet. 
10 Such devices receiving emails may be vulnerable to 

email borne viruses that may be received by users. For 
example, a user may open an email having the virus 
allowing the virus to damage the user's system, device, 
files, etc. Current defenses against such virus's 
15 include system administrators warning users of the virus 
(i.e. via email, voicemail, etc.) with hopes that a user 
does not open the email having the virus. Other 
solutions include rapidly developing and distributing an 
anti-virus program to detect the virus open receipt. 
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.qTTMMARY OF THE INVENTION 

In accordance with the teachings of the present 
invention, a device, system, and method for capturing 
email borne viruses are disclosed. According to one 
aspect of the invention, an input device for use with a 
system operable to process an electronic communication is 
disclosed. The input device includes a function button 
operably associated with selecting a type of electronic 
communication such as an email function and an 
identification key operable to identify the input device 
in response to a user selecting the function button. 

According to another aspect of the invention, a 
method for providing an identifier for processing an 
electronic communication is disclosed. The method 
includes receiving a request via an input device to 
process an email and determining an identification key 
operable to identify the input device. The method 
further includes processing the email using the 
requesting process upon validating the identification 
key. 

According to a further aspect of the invention, a 
system operably associated with processing an electronic 
communication is disclosed. The system includes 
a processor operable to process electronic communication 
such as an email and memory operably coupled to the 
processor. The system further includes an input device 
operably coupled to the processor. The processor is 
operable to validate a user request via the input device 
to process an email . 
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According to another aspect of the invention, a 
method for processing an electronic communication using a 
system is disclosed. The method includes determining an 
input device operably coupled to the system and 
determining an identification key operably associated 
with the input device. The method further includes 
processing an electronic communication upon receiving a 
valid request from the input device to process the 
electronic communication. 

According to a further aspect of the invention, an 
input device for use with a system operable to process an 
electronic communication such as email is disclosed. The 
device includes means for receiving a request via an 
input device to process an email and means for 
determining an identification key operable to identify 
the input device. The device further includes means for 
processing the email using the requesting process upon 
validating the identification key. 

According to another aspect of the invention, a 
medium including encoded logic for processing electronic 
communications is disclosed. The medium includes the 
logic operable to determine an input device operably 
coupled to the system and to determine an identification 
key operably associated with the input device. The 
medium further includes the logic operable to process an 
email upon receiving a valid request from the input 
device to process the email . 
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Technical advantages of certain embodiments of the 
invention include providing an input device operable to 
request processing an electronic communication such as an 
email. The input device, such as a keyboard, operably 
coupled to a system includes an electronic communication 
function button and a identification key uniquely 
identifying the keyboard. The keyboard's identification 
key may be used with a system's electronic communication 
software program to authenticate the origin of initiation 
of an electronic communication. As such, a user must 
interact with the keyboard to request processing an 
electronic communication and identification key for the 
keyboard may be provided to the electronic communication 
software program thereby allowing the program to validate 
the origin requesting processing of the electronic 
communication. In this manner, electronic communications 
having viruses that may be received from a third party 
will require a user input to initiate processing (i.e. 
forwarding, replying, sending, etc.) thereby reducing 
auto-sending electronic communications having viruses to 
addresses listed within a user's electronic communication 
account . 

Another technical advantage of certain embodiments 
of the invention includes a system operable to employ an 
email program. In one form, the system employing the 
email program may receive an input via user interface and 
verify the origin of the request prior to processing the 
email. Such verification may include accessing an 
operating system and/or hardware component associated 
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with the system to determine if a user initiated the 
request via an input device to process the email. In one 
embodiment, an identification key associated with an 
input device may be provided to verify initiation. In 
5 another embodiment, an input device port may be accessed 
by the system, an operating system, and/or software 
program to determine if the request is initiated by the 
input device. As such, verification of a request to 
process an email may be obtained prior to processing 
10 emails. 
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PT?TT^F DESCRIPTION OF THE DRAWINGS 

FIGURE 1 illustrates one embodiment of a system 
operable to use an electronic communication software 
program; 

5 FIGURE 2 illustrates one embodiment of a keyboard 

and mouse having selectable electronic communication 
function buttons; 

FIGURE 3 illustrates one embodiment of a flow 
diagram of a method for processing an electronic 
10 communication using an input device having an 

identification key according to one aspect of the present 
invention; and 

FIGURE 4 illustrates one embodiment of a flow 
diagram of a method for processing electronic 
15 communications using an electronic communication software 
application . 
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DETAILED DESCRIPTION OF THE INVENTION 

FIGURE 1 illustrates a system operable to use an 
electronic communication software program such as an 
email software application. However, the system may be 
5 used with a wide variety of electronic communication 

formats and is not limited to only email. The system may 
include a computer system, a personal digital assistant 
(PDA), a wireless handheld device, a wireless telephone, 
a portable computer, a server, or other devices operable 
10 to interact with a network such as a LAN, WAN, an 

Intranet, the Internet, a wireless network, or other 
networks . 

A system, indicated generally at 100, includes a 
central processing unit (CPU) 101 connected via at least 

15 one bus 108 to a basic input output system (BIOS) 

firmware 102, and memory, such as RAM, ROM, EEPROM, and 
any other memory devices, collectively designated by 
reference numeral 103. System 100 further includes an 
input/output adapter 106 for connecting peripheral 

20 devices such as SCSI drives, RAID drives, and a display 

adapter 114 for connecting a display device 115 such as a 
Flat Panel Display (FPD) or a Cathode Ray Tube (CRT) . A 
user interface adapter 109 is provided having connection 
ports for connecting a keyboard 110, a mouse 112, a 

25 speaker 111 and/or other user interface devices such as 
game controllers, touch pads, etc. System 100 also 
includes a communication module 107 for connecting system 
100 to an information network 117. For example, 
communication module 107 may include an ethernet card, a 
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cable modem, a digital subscriber line (DSL) modem, a 
wireless modem, an analog modem, or other modems and/or 
network interface cards operable to provide a system 
access to a network such as a LAN, WAN, the Internet, an 
Intranet, a wireless network, etc. 

During use, system 100 may employ an email software 
program for processing electronic communication such as 
emails or other software programs associated with a wide 
variety of electronic communications. The email software 
program may be operable to communicate emails for a user 
of system 10 0 and may receive and transmit emails via 
networks such as the Internet, an Intranet, a wireless 
network or other networks operable to communicate emails. 
For example, the email software program may be operable 
to store received emails within an in box, provide 
folders for storing and saving emails, provide one or 
more address books having email addresses, provide 
communication function buttons which may be operable to 
allow a user to edit, draft, forward, send, delete, etc. 
emails. The email software program may further be 
operable to receive emails which may include attachments 
and may also be operable to attach such attachments to an 
email communication for sending to a third party. 

In one embodiment, system ICQ may receive a request 
from a user via a user interface to process an email . 
For example, system 10 0 may receive an input via keyboard 
110 to forward an email. System 100 may validate that a 
user interacted with keyboard 110 by accessing an input 
device port (not expressly shown) associated with user 
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interface adapter 109 and communication port coupling 
keyboard 110 to system 100. As such, through system 100 
verifying the origin of the request to forward the email, 
an email may not be automatically forwarded to another 
5 system and/or user. For example, a user may select a 
send function button operably associated with keyboard 
110 for sending an email to a third party. As such, 
system 100 may detect a request by a user selecting the 
function button. Similarly, system 100 may receive an 

10 identification key operable to identify keyboard 110. As 
such, system 100 may verify the send function and the 
identification key prior to processing the email. In 
this manner, an email communicated to system 10 0 may not 
be automatically forwarded to a third party without a 

15 user initiating forwarding of the communication to a 

third party via a user input device operably coupled to 
system 100 . 

FIGURE 2 illustrates a keyboard having selectable 
electronic communication function buttons. A keyboard, 

20 illustrated generally at 200, includes a set of keys 201 
such as a QWERTY keyboard, a keypad operable to be used 
with a wireless device, or other input keys operable to 
provide entry of alphanumeric and/or symbolic text. 
Keyboard 200 further includes an array of electronic 

25 communication function buttons including a send email 
button 2 03, a check email button 2 04, a forward email 
button 205, a reply email button 206, and a delete email 
button 207. Keyboard 200 further includes keyboard 
identification key 208 which may include a single value 
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operably associated with keyboard 200 and stored within 
memory (not expressly shown) associated with keyboard 
200. Keyboard identification key 208 may be a variable 
value operable to be programmed and/or reprogrammed to 
5 uniquely identify keyboard 200. Keyboard 200 may also be 
coupled to a mouse 2 09 which may be directly coupled to 
keyboard 2 00 or may be coupled to a computer system such 
as system 100 of FIGURE 1. Mouse 209 further includes a 
mouse identification 210 similar to keyboard 
10 identification key 208 and operable to uniquely identify 
mouse 2 09. 

During use, a user may select one of the plurality 
of email function buttons 203, 204, 205, 206 or 207 for 
processing email for a user accessing an email software 

15 program. For example, a user must select send button 2 04 
to initiate sending an email to a third party. Keyboard 
200 may provide a request to the system (not expressly 
shown) requesting a send function. Keyboard 200 may also 
provide keyboard identification key 208 to uniquely 

20 identify keyboard 200 as being the requesting input 
device. As such, the system and/or email software 
program may validate the request prior to processing the 
email using a send function. In this manner, undesirable 
autoforwarding or sending of emails which may be received 

25 by a user of a system operably coupled to keyboard 200 
may be reduced thereby reducing proliferation of email 
viruses to third parties associated with a user, a 
system, and/or an email software program. 
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In one embodiment, a user may request processing an 
email using mouse 209. For example, an email software 
program having selectable function buttons within a 
graphical user interface for processing emails may be 
accessed using mouse 209. The email program may be a 
system or network native application and may include drop 
down menus, selectable icons and/or soft keys having 
software encoded functionality for manipulating, editing, 
authoring, and/or processing emails. For example, a user 
may select a forward function using mouse 209 and mouse 
2 09 may provide mouse identification key 210 operable to 
verify the input originated from mouse 209. As such, 
mouse identification key 210 may be communicated to the 
email software program after a user selects the function 
within the email software program to verify the origin of 
the initiating input device. 

In one embodiment, during initialization and/or 
installation of an email software program and/or a new 
keyboard or mouse, an identification key may be created 
for keyboard 2 00 and/or mouse 2 09. For example, an email 
software program and/or system may request the user to 
create an identification key through selecting one or 
more keys operably associated with an input device. As 
such, the identification key may be associated with the 
input device and may be updated upon initialization 
and/or installation of the software program. 

In another embodiment, the system and/or email 
software program may randomly create a device 
identification key for an input device operably coupled 
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to the system which may be used for processing emails. 
The device identification key may be created during 
initialization and/or installation of the program and may 
be communicated to each input device and stored within a 
5 memory operably associated with each input device. As 
such, a different identification key may be used on a 
random basis, thereby reducing the ability of a third 
party to identify an input device's identification key. 
In a similar manner, keyboard 2 00, the system and/or 
10 software program may be programmed to use various keys to 
request processing of emails. For example, during 
initialization of an email software program, a user may 
be asked to enter a series of keys to be associated with 
processing an email. The user may select a combination 
15 of "Alt-7" to be associated with forwarding an email. In 
this manner, a different series of keys may be provided 
for email process functions. Additionally, a user may be 
required to enter a valid password to request processing 
an email thereby adding an additional layer of security 
20 for processing emails. 

FIGURE 3 illustrates a flow diagram of a method for 
processing an electronic communication using an input 
device having an identification key. The method begins 
at step 3 00. At step 3 01, the method receives an input 
25 from a user for processing an electronic communication 
such as an email. For example, the input may be a send 
request, a forward request, a delete request, an edit 
request, a reply request, etc. Upon receiving the input, 
the method proceeds to step 3 02 where the method 
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determines the input device requesting the process. For 
example, the method may determine the input originated 
from a scribe pad operably coupled to a PDA. The method 
proceeds to step 3 03 where the method determines an 
5 identification key operable to identify the input device 
requesting processing of the email. For example, the 
identification key may be operably associated with a 
keyboard, a mouse, a touchpad, a pointing device, etc. 
and may be stored within a memory operably associated 
10 with an input device or within memory operably coupled to 
a system. 

Upon determining the identification key, the method 
proceeds to step 3 04 where the method determines if the 
identification key is valid. If the identification key 

15 is not valid, the method proceeds to step 306 where the 

method re-requests the identification key and to step 307 
where the identification key is revalidated. If the 
identification key is valid, the method proceeds to step 
305 where the method determines if the request originated 

20 from an input device. If the request did not originate 
from an input device, the method proceeds to step 3 08 
where the method quarantines the email and to step 3 09 
where the method sends a notice to a system administrator 
and/or user that an email potentially containing a virus 

25 has been detected. The method then proceeds to step 311 
where the method ends . 

If at step 3 04 the method determines that the 
identification key is valid, the method proceeds to step 
3 05 where the method determines if the input originated 
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from an input device. If the input did originate from an 
input device, the method proceeds to step 310 where the 
method processes the email using the requested process. 
For example, the method may send an email, forward an 
5 email, save an email, delete an email, etc. The method 
then proceeds to step 3 01 where the method receives an 
input from a user. 

FIGURE 4 illustrates a flow diagram of a method for 
processing electronic communications using an electronic 
10 communication software program. The method begins at 

step 400 and may be used in association with electronic 
communication software program such as an email software 
program that may be accessed via system, an Intranet 
and/or the Internet operable to provide an email software 
15 program. At step 401, the method determines which input 
devices are operable to be used by the email software 
program. For example, the system may include one or more 
input devices such as a keyboard, mouse, touchpad, script 
pad, etc. coupled to a user interface for providing an 
2 0 input to a system using the email software program. Upon 
determining a valid input device, the method proceeds to 
step 402 where the method determines which function 
buttons for an input device are valid for processing 
emails. For example, a keyboard may include a "send" 
25 function button for requesting a send function associated 
with the email software program. As such, one or more 
valid input devices may include function buttons operably 
associated with processing emails and may include a check 
mail function button, a send function button, a delete 
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function button, a save function button, a forward 
function button, etc. 

The method then proceeds to step 4 03 where the 
method determines a valid identification key for each 
5 input device operable to request a process. The 
identification key(s) may be stored in a database 
accessible by the program and in one embodiment the 
method may create an identification key for an input 
device operably coupled to the system using the email 
10 software program. In another embodiment, the method may 
query one or more ports having one or more input devices 
operably coupled to the system and obtain an input 
identification key for each device operably coupled to 
the system. 

15 The method then proceeds to step 404 where the 

method receives a request to process an email. For 
example, the email software program may receive a request 
from an input device, from an operating system operably 
associated with a system employing the email program, or 

2 0 from a processor operably coupled to the system employing 
the software program. Upon receiving the request, the 
method proceeds to step 4 05 where the method determines a 
source requesting processing of the email. For example, 
a user may select a forward function button operably 

25 associated with a keyboard coupled to a system employing 
the email software program. As such, the method proceeds 
to step 406 where the method determines an identification 
key provided by the input device. For example, the 
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method may access a memory location having the 
identification key provided by the input device. 

Upon determining the identification key, the method 
proceeds to step 407 where the method determines if the 
5 identification key is valid. For example, the 

identification key determined for an input device 
determined at step 4 03 is compared to the identification 
key of the requesting input device. If the 
identification key is not valid, the method proceeds to 

10 step 409 where the method re-requests the input device's 
identification key and to step 410 where the method 
revalidates the identification key. If the 
identification key is not valid, the method proceeds to 
step 413 where the method quarantines the email and to 

15 step 414 where the method notifies the system 

administrator and/or system user of the potential 
virus-containing email. The method then proceeds to step 
615 where the method ends. 

If at step 4 08, the method determines that the 

20 identification key is valid, the method proceeds to step 
412, where the method determines if the request for 
processing was initiated by a user selecting a function 
button operably associated with an input device coupled 
to the system. If the method determines that a user 

25 initiated the request, the method proceeds to step 416, 
where the method processes the email. For example, the 
method may forward an email, send an email, delete an 
email, access a group of email addresses, or other email 
functions operably associated with email software 
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programs. In one embodiment, the method may include 
appending the email to include the identification key 
prior to sending the email to a third party. In this 
manner, if an email having a virus is forwarded to a 
5 third party, a system, a system administrator, a user, 
etc. may be able to access the email and decrypt the 
identification key to determine the origin of the email. 
Upon processing the email, the method then proceeds to 
step 404. 

10 If at step 412 the method determines that a user did 

not initiate the request to process the email, the method 
proceeds to step 413 where the method quarantines the 
email and to step 414 where the method notifies a user 
and/or system administrator of the potential 

15 virus-containing email. The method then proceeds to step 
615 where the method ends. 

Although the present invention has been described 
with several embodiments, a myriad of changes, 
variations, alterations, transformations, and 

20 modifications may be suggested to one skilled in the art, 
and it is intended that the present invention encompass 
such changes, variations, alterations, transformations, 
and modifications as fall within the scope of the 
appended claims . 



AUS01:229458.1 



